Germany: Citizens permitted to redact sensitive data from ID copies

The German Federal Ministry of the Interior has clarified that citizens are entitled to redact unnecessary sensitive information from copies of their identity documents to promote data minimization. Experts warn that providing unredacted copies of ID cards or passports for online authentication poses significant risks of identity theft.

Criminals can misuse such data to open bank accounts, sign contracts, or commit crimes under a victim's name. While certain information like name, address, and date of birth may be essential for verification, details such as eye color, height, or specific document access numbers are often irrelevant to the authentication process. Redacting these fields reduces the potential damage if a service provider's database is compromised.

Under the Identity Card Act, copies are permitted in specific legal contexts, such as opening bank accounts under the Money Laundering Act, signing prepaid mobile contracts, or applying for a driver's license. However, in many scenarios, such as renting an apartment, simply presenting the original document and receiving a verification note is sufficient instead of providing a permanent copy.